iptables data bag